$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa File: d2bbd598-d050-3e9c-b8b7-18a976731d02.roa (raw, json) Hash identifier: 9c4NnZ4cuL0vDJ2gSeZwwUbDLyvB455HURUjFRdnh70= Subject key identifier: D1:4E:09:61:14:DB:02:05:E9:CB:50:A3:BF:92:BB:B2:09:43:15:D3 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584F49762D06EA950C46D3F134BC Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397976 IP address blocks: 158.247.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:2d:06:ea:95:0c:46:d3:f1:34:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec607ab4-422f-44de-96cc-90007abc1291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:76:db:a7:a0:a2:c9:d0:78:8f:af:3b:99: b2:28:76:ac:cc:22:a5:26:e0:bd:63:61:51:c7:eb: 45:10:03:3d:0a:b4:c2:ea:81:5f:88:72:1d:8d:80: f4:73:bb:22:da:b5:06:d2:19:5f:91:3c:f7:b8:61: 0f:5e:91:6b:8b:31:4f:ed:5a:43:29:2f:5c:cf:d6: d0:ca:66:e0:c5:61:9a:56:1b:05:c6:20:ae:bf:a4: c5:44:f4:11:e3:fa:ca:c7:a7:5c:80:9f:05:36:3e: 29:11:34:05:e6:38:a3:31:d1:05:78:72:22:38:be: 2e:38:4b:88:d5:f6:d4:99:4a:29:64:93:dc:f8:d8: 93:98:3b:32:d0:20:a9:ff:dc:a6:71:0e:96:45:cc: e5:0a:8e:0b:d1:e8:b9:f6:5c:a6:51:a3:8c:97:17: 33:69:a7:39:dc:4c:2d:31:06:29:da:02:d7:e4:04: dd:b8:45:41:c0:f5:1e:15:88:bf:da:5c:55:56:4d: 92:ca:51:71:da:d6:bf:da:a9:92:bf:d6:8d:dc:7c: 15:b5:f9:f4:9a:49:03:eb:6a:ec:ab:7a:9f:79:b1: 73:59:bb:11:ca:f8:3a:8a:f5:c9:bc:ef:75:3b:e8: 79:5c:b1:1b:fe:82:f8:cd:32:08:a3:3e:f5:41:aa: 47:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4E:09:61:14:DB:02:05:E9:CB:50:A3:BF:92:BB:B2:09:43:15:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/d2bbd598-d050-3e9c-b8b7-18a976731d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 158.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:69:e2:ea:2e:b5:b5:70:c2:1f:7e:0d:26:df:4a:58:b2:12: 8e:3c:44:4d:1c:4d:3e:95:09:7c:60:0f:57:40:37:38:7b:40: 4a:a2:93:9e:a3:93:c1:b3:b4:d8:36:ea:8f:52:31:6d:fa:72: 0f:4f:51:1a:df:a4:b4:84:eb:70:e1:6d:37:e8:24:16:a4:1a: 9d:64:13:8a:14:73:94:1c:ef:3f:ca:8d:46:a3:04:20:e2:08: 9e:a4:6c:c2:51:d1:47:d0:47:a3:d2:ad:50:4d:cc:b1:ef:70: 92:11:f5:98:7e:cd:12:21:62:99:ee:e3:55:79:15:47:5a:a2: 55:64:6d:a3:f0:61:e8:49:6c:b1:f6:91:59:f0:a2:b4:fe:1c: 2f:52:d7:9d:d9:61:78:cf:d9:3e:67:1e:78:64:36:58:b7:f9: 16:9f:1a:82:5c:44:a9:0d:74:a3:d9:6a:ec:91:4e:d4:89:df: 85:35:90:64:9e:c9:ed:17:95:b9:f7:b7:85:35:b3:b7:9b:86: 6d:52:7e:5c:aa:31:e1:2a:99:01:72:cf:47:e4:da:bc:8d:d2: c8:78:67:f4:83:96:b3:ce:92:db:c3:98:7e:ba:18:b7:d8:92: 8d:7a:e5:94:ad:09:b6:89:f1:3d:96:d2:24:1b:d8:58:78:be: 69:aa:5a:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdi0G6pUMRtPxNLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM2MDdhYjQtNDIyZi00NGRlLTk2Y2MtOTAwMDdhYmMxMjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPh226egosnQeI+vO5myKHaszCKlJuC9Y2FR x+tFEAM9CrTC6oFfiHIdjYD0c7si2rUG0hlfkTz3uGEPXpFrizFP7VpDKS9cz9bQ ymbgxWGaVhsFxiCuv6TFRPQR4/rKx6dcgJ8FNj4pETQF5jijMdEFeHIiOL4uOEuI 1fbUmUopZJPc+NiTmDsy0CCp/9ymcQ6WRczlCo4L0ei59lymUaOMlxczaac53Ewt MQYp2gLX5ATduEVBwPUeFYi/2lxVVk2SylFx2ta/2qmSv9aN3HwVtfn0mkkD62rs q3qfebFzWbsRyvg6ivXJvO91O+h5XLEb/oL4zTIIoz71QapHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFOCWEU2wIF6ctQo7+Su7IJQxXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvZDJiYmQ1OTgtZDA1MC0z ZTljLWI4YjctMThhOTc2NzMxZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnvcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtp4uoutbVwwh9+DSbfSliyEo48RE0cTT6VCXxgD1dANzh7QEqik56j k8GztNg26o9SMW36cg9PURrfpLSE63DhbTfoJBakGp1kE4oUc5Qc7z/KjUajBCDi CJ6kbMJR0UfQR6PSrVBNzLHvcJIR9Zh+zRIhYpnu41V5FUdaolVkbaPwYehJbLH2 kVnworT+HC9S153ZYXjP2T5nHnhkNli3+RafGoJcRKkNdKPZauyRTtSJ34U1kGSe ye0Xlbn3t4U1s7ebhm1SflyqMeEqmQFyz0fk2ryN0sh4Z/SDlrPOktvDmH66GLfY ko165ZStCbaJ8T2W0iQb2Fh4vmmqWgo= -----END CERTIFICATE-----Generated at Fri Sep 25 23:06:24 2026 by rpki-client